5

CVE-2008-3960

Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via "malicious packets."

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Updatefp16 Version <= 8.2
Ibm ≫ Db2 Universal Database Version8.2
Ibm ≫ Db2 Universal Database Version8.2 Updatefp1
Ibm ≫ Db2 Universal Database Version8.2 Updatefp10
Ibm ≫ Db2 Universal Database Version8.2 Updatefp11
Ibm ≫ Db2 Universal Database Version8.2 Updatefp12
Ibm ≫ Db2 Universal Database Version8.2 Updatefp13
Ibm ≫ Db2 Universal Database Version8.2 Updatefp14
Ibm ≫ Db2 Universal Database Version8.2 Updatefp15
Ibm ≫ Db2 Universal Database Version8.2 Updatefp2
Ibm ≫ Db2 Universal Database Version8.2 Updatefp3
Ibm ≫ Db2 Universal Database Version8.2 Updatefp4
Ibm ≫ Db2 Universal Database Version8.2 Updatefp5
Ibm ≫ Db2 Universal Database Version8.2 Updatefp6
Ibm ≫ Db2 Universal Database Version8.2 Updatefp7
Ibm ≫ Db2 Universal Database Version8.2 Updatefp8
Ibm ≫ Db2 Universal Database Version8.2 Updatefp9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.42% 0.787
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.